Head Of Cyber

Arbuthnot Latham has been associated with banking since 1833. We combine private and commercial banking, wealth planning and investment management. We believe in traditional relationship and service-led banking powered by modern technology.

Job purpose

Lead the Bank's cyber security function, acting as deputy to the CIO & CISO and providing leadership across Cyber Governance & Compliance, Cyber Assurance & Architecture, and Cyber Operations & Third-Party Security. Ensure the effective delivery of cyber governance, assurance, operational oversight and resilience capabilities.

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA’s Conduct Rules.

Job Description

Key Responsibilities:

• Lead and develop the cyber security function, ensuring effective delivery across governance, assurance and operational security disciplines.
• Deliver the cyber security strategy and roadmap, ensuring alignment with business objectives, regulatory requirements and the Bank's risk appetite.
• Oversee cyber risk, control effectiveness and management reporting, ensuring cyber risks remain aligned to the Bank's risk appetite and regulatory obligations.
• Act as Incident Director during major cyber incidents and cyber crisis events.
• Sponsor cyber resilience, operational resilience and security exercising activities.
• Ensure effective oversight of outsourced cyber security services and critical cyber security suppliers.
• Drive continual improvement of cyber capabilities, controls and operational effectiveness.
• Develop cyber talent, succession plans and organisational capability across the cyber function.

Key Interfaces:

• Technology Teams
• Operational Resilience Team
• Human Resources
• Change Management
• Architecture
• Data Privacy
• Supplier Management

Person Specification

Knowledge/ Experience/Skills:

• Significant cyber leadership experience
• Experience within a regulated environment
• Experience managing outsourced cyber services
• Experience leading major cyber incidents
• Strong understanding of cyber security governance, risk management and operational security.
• Experience operating within ISO27001-aligned control environments.
• Understanding of operational resilience, cyber incident management and third-party security.
• Ability to translate cyber risks into business-focused and regulatory reporting.

Qualifications:

Minimum of two of the below is required:

• CISSP
• CISM
• CRISC
• ISO27001 Lead Implementer/Auditor

Competencies:

• Problem Solving and Judgment
• Customer Focus
• Planning and Reviewing
• Performance Focus
• Communication and Confidence